Significant Increase in Web Attacks
A recent report by Akamai Technologies, Inc. (NASDAQ: AKAM) has revealed startling statistics regarding the increasing frequency of web attacks, indicating a 33% rise year-over-year. This startling surge aligns with the rapid adoption of AI-powered applications, which presents new avenues for malicious activities and complicates existing security measures.
The API Target Landscape
In this report, Akamai uncovers that APIs have become a primary focus for attackers, with approximately 150 billion API attacks recorded from January 2023 to December 2024. The growing AI API market, which integrates intelligent tools with core platforms, has significantly broadened the attack surface. Many AI-driven APIs remain openly accessible and often suffer from weak authentication, increasing vulnerability as cyber threats escalate in sophistication.
Rise in Distributed Denial-of-Service Attacks
The report also noted a sharp increase in Layer 7 (application-layer) distributed denial-of-service (DDoS) attacks against web applications and APIs, with quarterly volumes soaring by 94% when comparing the first and fourth quarters of 2024. Akamai observed a staggering rise in monthly attack numbers, with incidents jumping from 500 billion to 1.1 trillion within a year, primarily fueled by the increasing sophistication of bot-driven attacks. Additionally, HTTPS flooding has emerged as a prevalent attack vector, particularly targeting the technology sector.
Key Findings from Akamai's Report
The Akamai report highlights several critical findings that underline the state of cybersecurity across various sectors. Among the most notable statistics are:
- Over 230 billion web attacks targeted commerce organizations, making it the most affected industry, nearly tripling the attacks experienced by the high technology sector, which ranks second.
- From January 2023 to December 2024, the high technology sector endured approximately 7 trillion Layer 7 DDoS attacks, marking it as the highest impacted industry.
- Incidents related to the OWASP API Security Top 10 rose by 32%, shedding light on authentication and authorization failures that expose sensitive user data.
- Moreover, there was a 30% increase in security alerts associated with the MITRE security framework due to the advanced techniques attackers employ, including automation and AI.
- Shadow and zombie APIs have surfaced as particularly dangerous threats within increasingly convoluted API ecosystems.
Understanding Web and API Attacks
Akamai's report, "State of Apps and API Security 2025: How AI Is Shifting the Digital Terrain," provides a detailed exploration of the disparities between web and API attacks, alongside regional and industry-specific data. Furthermore, it includes strategic insights on mitigating threats effectively while addressing the complexities of modern cybersecurity challenges.
Expert Commentary on Changing Threat Dynamics
Rupesh Chokshi, Senior Vice President and General Manager of Akamai's Application Security Portfolio, emphasized the dual nature of AI's impact. "AI is transforming web and API security, enhancing threat detection but also creating new challenges," he remarked, signifying the pressing need for defenders to understand evolving dynamics and adopt appropriate mitigation strategies.
Akamai's Commitment to Cybersecurity
This year marks the 11th installment of Akamai's State of the Internet reports, which provide invaluable cybersecurity insights derived from extensive data collected across a global network that manages over a third of worldwide web traffic. Akamai is dedicated to delivering top-tier security solutions and intelligence, ensuring businesses can navigate the complexities of online operations safely and confidently.
About Akamai Technologies, Inc.
Akamai is a leading cybersecurity and cloud computing firm, committed to empowering businesses online through advanced security measures. Our expertise in threat intelligence and global operations ensures comprehensive protection for enterprise data and applications. With a focus on performance and cost-efficiency, Akamai supports organizations as they expand their digital footprint with confidence.
Frequently Asked Questions
What is the significance of the increase in web attacks?
The increase in web attacks reflects the growing vulnerabilities associated with enhanced adoption of AI technologies and highlights the urgent need for improved cybersecurity measures.
Why are APIs particularly targeted?
APIs are increasingly being targeted due to their accessibility and often inadequate security mechanisms, which make them attractive targets for cybercriminals.
What recent trends have emerged in DDoS attacks?
Recent trends show a dramatic surge in Layer 7 DDoS attacks, particularly affecting web applications in the technology sector, indicating a shift towards more sophisticated attack strategies.
How can companies mitigate these threats?
Organizations can mitigate threats by adopting robust authentication practices, continually monitoring API security, and implementing effective DDoS protection strategies.
What insights does the Akamai report provide?
The Akamai report provides valuable insights into attack patterns, vulnerabilities, and recommendations for better security practices, empowering defenders to safeguard their digital assets effectively.
